Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/23bf980d-5e6c-3b60-ba8f-d6f9a741a3db.roa
File: 23bf980d-5e6c-3b60-ba8f-d6f9a741a3db.roa (raw, json)
Hash identifier: a8KzBKO0wSd80TRUkb4Mel3a4AYUz812Ut3ajqdAu7M=
Subject key identifier: AA:43:A8:F3:7D:B3:41:3C:28:D1:76:D7:AE:2E:09:B3:C3:FB:01:BB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584037E1703B7D9C334DBB5DDD80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/23bf980d-5e6c-3b60-ba8f-d6f9a741a3db.roa
Signing time: Mon 12 Dec 2022 12:00:00 +0000
ROA not before: Mon 12 Dec 2022 12:00:00 +0000
ROA not after: Tue 17 Jan 2023 05:00:00 +0000
asID: 22394
IP address blocks: 155.146.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:37:e1:70:3b:7d:9c:33:4d:bb:5d:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 12 12:00:00 2022 GMT
Not After : Jan 17 05:00:00 2023 GMT
Subject: CN=2eeaa3e5-6c0c-43bd-8ec8-61427cee9f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f6:80:48:18:58:11:48:bb:4c:27:73:6f:16:
4c:a4:30:73:b4:16:9e:33:5b:74:97:b8:7e:a4:00:
56:ba:0b:c2:7c:1c:30:08:7b:37:8c:52:bb:47:43:
4a:87:32:c4:26:c4:e7:d3:ad:d8:cd:1d:bb:98:c1:
85:53:c5:b5:49:f3:8e:94:a0:75:b7:e7:b6:ed:b6:
22:51:8a:10:46:bd:53:12:d3:14:7c:88:13:3b:5d:
9f:a1:70:00:92:8d:f8:59:9d:45:50:d1:33:7b:3c:
46:0d:d8:ac:40:46:e8:8f:16:e8:2d:bd:6f:8a:b4:
d0:4c:94:90:86:a3:42:fd:a2:28:9f:30:b3:44:00:
25:9b:8f:d5:a2:3c:83:dd:fc:8c:4c:58:eb:31:ba:
b0:c4:d1:ba:5c:c0:09:28:27:53:c1:e6:d7:8d:0c:
86:86:72:2a:f4:45:3f:b0:fb:b7:b6:50:99:bb:19:
d7:ff:cd:32:c9:77:64:fa:2c:ab:8a:1a:6b:b9:70:
97:21:5c:f6:0b:52:7d:95:02:43:1f:f5:68:60:76:
df:06:b0:c1:84:d8:58:74:51:40:d1:05:f2:47:f9:
be:b8:91:3f:ca:c3:e3:af:ad:cd:b7:2e:44:f4:36:
38:20:a8:cf:72:70:24:8c:69:e6:fc:38:d0:3a:41:
a3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:43:A8:F3:7D:B3:41:3C:28:D1:76:D7:AE:2E:09:B3:C3:FB:01:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/23bf980d-5e6c-3b60-ba8f-d6f9a741a3db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:f6:13:d3:96:fe:53:f7:de:25:f3:13:32:7c:a1:9e:a4:7d:
2d:12:6f:9e:6f:82:06:0c:34:37:be:75:a6:13:dd:81:13:70:
00:46:77:a4:36:83:10:26:9a:26:8b:c8:3b:bf:3b:39:c9:ef:
bd:86:a5:cb:3e:bd:af:04:80:64:4c:9d:70:e6:0c:94:b3:0b:
15:db:a3:4b:18:11:90:73:2e:bb:85:f2:8c:40:15:09:56:cd:
59:7b:22:be:a3:27:36:1b:d4:1a:60:e2:6e:c9:48:83:15:6f:
3b:6c:d4:35:f3:e8:20:fa:0d:24:15:f2:4b:98:a4:bf:4a:e7:
1e:fa:24:70:3d:f7:54:f7:d4:8c:0b:e4:8a:10:8c:ed:bb:f2:
d2:c8:a9:f3:36:d7:5e:74:20:7f:40:fa:54:22:f7:a8:87:05:
13:a7:6b:50:1f:33:e2:b1:6f:ec:f5:e8:89:7a:71:82:17:b3:
d2:6e:f8:43:be:b1:3e:56:12:6f:4d:29:88:23:9b:50:9c:e7:
dc:bb:71:ee:a6:19:eb:c3:08:44:e9:ae:51:c8:50:6d:0d:fe:
5e:c7:84:02:bf:93:56:ee:5b:a7:42:9c:7f:ee:11:40:bf:86:
ae:35:c8:ed:96:d9:99:9f:f3:71:56:eb:17:40:06:23:27:a7:
60:6b:9b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:51:54 2025 by rpki-client